We don't sell consent.
We verify it.

Gretelfy is an independent cookie compliance scanner that checks whether your Consent Management Platform actually does what it claims. No conflict of interest. No upsell to a consent solution. Just the truth about your cookie trail.

The problem we solve

Most websites use a Consent Management Platform — Cookiebot, OneTrust, CookieYes — to handle cookie consent. These tools both provide the consent banner and report on compliance. That's like hiring the same firm to build your house and inspect it.

The result? Websites that look compliant on paper but still fire Google Analytics, Facebook Pixel, and marketing scripts before a visitor ever clicks "Accept." Regulators are catching on. Fines are rising.

Gretelfy exists because compliance needs an independent set of eyes.

How it works

Step 1

Enter the forest

Submit a URL. Gretelfy visits your site as a fresh visitor — no cookies, no history, no consent given. A clean slate, like a first-time user.

Step 2

Follow the crumbs

We record every cookie set, every script fired, every network request made — all before anyone interacts with a consent banner. The trail doesn't lie.

Step 3

See what's hiding

Get your Gretel Score, a breakdown of every violation, and clear remediation steps to fix what's wrong. Export a PDF for your records or your auditor.

What makes us different

Independent by design

We don't sell consent banners, cookie scripts, or CMP subscriptions. Our only product is the audit itself. That means our incentive is accuracy, not upselling you a consent solution.

Real browser, real results

We don't crawl HTML or guess. We launch a real browser session, load your page, and observe what actually happens. Same experience your visitors get.

Continuous monitoring

Websites change. CMPs update. New scripts get added. Gretelfy runs scheduled scans so you catch regressions before a regulator does.

Actionable, not theoretical

Every violation comes with specific remediation steps. Not generic advice — actual instructions your developer can follow to fix the issue.

Who uses Gretelfy

DPOs and compliance teams who need independent verification that their CMP is working, not just a dashboard from the CMP vendor saying everything is fine.

Agencies and consultants who manage compliance for multiple client websites and need a scalable way to audit and report.

Developers who want to catch pre-consent violations in staging before they reach production.

Anyone with a website who wants to know what's really happening before their visitors click "Accept."

Ready to see through the cookie house?

Run your first scan for free. No account required.